mirror of
https://github.com/Atmosphere-NX/Atmosphere
synced 2024-12-24 05:11:14 +00:00
f66b41c027
exo2: Implement uncompressor stub and boot code up to Main(). exo2: implement some more init (uart/gic) exo2: implement more of init exo2: improve reg api, add keyslot flag setters exo2: implement se aes decryption/enc exo2: fix bugs in loader stub/mmu mappings exo2: start skeletoning bootconfig/global context types arch: fix makefile flags exo2: implement through master key derivation exo2: implement device master keygen exo2: more init through start of SetupSocSecurity exo2: implement pmc secure scratch management se: implement sticky bit validation libexosphere: fix building for arm32 libexo: fix makefile flags libexo: support building for arm64/arm sc7fw: skeleton binary sc7fw: skeleton a little more sc7fw: implement all non-dram functionality exo2: fix DivideUp error sc7fw: implement more dram code, fix reg library errors sc7fw: complete sc7fw impl. exo2: skeleton the rest of SetupSocSecurity exo2: implement fiq interrupt handler exo2: implement all exception handlers exo2: skeleton the entire smc api, implement the svc invoker exo2: implement rest of SetupSocSecurity exo2: correct slave security errors exo2: fix register definition exo2: minor fixes
103 lines
No EOL
3.9 KiB
C++
103 lines
No EOL
3.9 KiB
C++
/*
|
|
* Copyright (c) 2018-2020 Atmosphère-NX
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify it
|
|
* under the terms and conditions of the GNU General Public License,
|
|
* version 2, as published by the Free Software Foundation.
|
|
*
|
|
* This program is distributed in the hope it will be useful, but WITHOUT
|
|
* ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
|
|
* FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for
|
|
* more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
#include <exosphere.hpp>
|
|
#include "secmon_key_storage.hpp"
|
|
|
|
namespace ams::secmon {
|
|
|
|
namespace {
|
|
|
|
constinit u8 g_rsa_moduli[ImportRsaKey_Count][se::RsaSize] = {};
|
|
constinit bool g_rsa_modulus_committed[ImportRsaKey_Count] = {};
|
|
|
|
ALWAYS_INLINE u8 *GetRsaKeyModulus(ImportRsaKey which) {
|
|
return g_rsa_moduli[which];
|
|
}
|
|
|
|
ALWAYS_INLINE u8 *GetRsaKeyPrivateExponent(ImportRsaKey which) {
|
|
return ::ams::secmon::impl::GetRsaPrivateExponentStorage(static_cast<int>(which));
|
|
}
|
|
|
|
ALWAYS_INLINE bool IsRsaKeyProvisional(ImportRsaKey which) {
|
|
return g_rsa_modulus_committed[which] == false;
|
|
}
|
|
|
|
void ClearRsaKeyModulus(ImportRsaKey which) {
|
|
g_rsa_modulus_committed[which] = false;
|
|
std::memset(g_rsa_moduli[which], 0, se::RsaSize);
|
|
}
|
|
|
|
ALWAYS_INLINE u8 *GetMasterKeyStorage(int index) {
|
|
return ::ams::secmon::impl::GetMasterKeyStorage(index);
|
|
}
|
|
|
|
ALWAYS_INLINE u8 *GetDeviceMasterKeyStorage(int index) {
|
|
return ::ams::secmon::impl::GetDeviceMasterKeyStorage(index);
|
|
}
|
|
|
|
}
|
|
|
|
void ImportRsaKeyExponent(ImportRsaKey which, const void *src, size_t size) {
|
|
/* If we import an exponent, the modulus is not committed. */
|
|
ClearRsaKeyModulus(which);
|
|
|
|
/* Copy the exponent. */
|
|
std::memcpy(GetRsaKeyPrivateExponent(which), src, size);
|
|
}
|
|
|
|
void ImportRsaKeyModulusProvisionally(ImportRsaKey which, const void *src, size_t size) {
|
|
std::memcpy(GetRsaKeyModulus(which), src, std::min(static_cast<int>(size), se::RsaSize));
|
|
}
|
|
|
|
void CommitRsaKeyModulus(ImportRsaKey which) {
|
|
g_rsa_modulus_committed[which] = true;
|
|
}
|
|
|
|
bool LoadRsaKey(int slot, ImportRsaKey which) {
|
|
/* If the key is still provisional, we can't load it. */
|
|
if (IsRsaKeyProvisional(which)) {
|
|
return false;
|
|
}
|
|
|
|
se::SetRsaKey(slot, GetRsaKeyModulus(which), se::RsaSize, GetRsaKeyPrivateExponent(which), se::RsaSize);
|
|
return true;
|
|
}
|
|
|
|
void LoadProvisionalRsaKey(int slot, ImportRsaKey which) {
|
|
se::SetRsaKey(slot, GetRsaKeyModulus(which), se::RsaSize, GetRsaKeyPrivateExponent(which), se::RsaSize);
|
|
}
|
|
|
|
void SetMasterKey(int generation, const void *src, size_t size) {
|
|
const int index = generation - pkg1::KeyGeneration_Min;
|
|
se::EncryptAes128(GetMasterKeyStorage(index), se::AesBlockSize, pkg1::AesKeySlot_RandomForKeyStorageWrap, src, size);
|
|
}
|
|
|
|
void LoadMasterKey(int slot, int generation) {
|
|
const int index = std::min(0, generation - pkg1::KeyGeneration_Min);
|
|
se::SetEncryptedAesKey128(slot, pkg1::AesKeySlot_RandomForKeyStorageWrap, GetMasterKeyStorage(index), se::AesBlockSize);
|
|
}
|
|
|
|
void SetDeviceMasterKey(int generation, const void *src, size_t size) {
|
|
const int index = generation - pkg1::KeyGeneration_4_0_0;
|
|
se::EncryptAes128(GetDeviceMasterKeyStorage(index), se::AesBlockSize, pkg1::AesKeySlot_RandomForKeyStorageWrap, src, size);
|
|
}
|
|
|
|
void LoadDeviceMasterKey(int slot, int generation) {
|
|
const int index = std::min(0, generation - pkg1::KeyGeneration_4_0_0);
|
|
se::SetEncryptedAesKey128(slot, pkg1::AesKeySlot_RandomForKeyStorageWrap, GetDeviceMasterKeyStorage(index), se::AesBlockSize);
|
|
}
|
|
|
|
} |